Riva PM Privacy Policy

1Riva PM’s Role

Depending on how Riva PM is used, Riva PM may act as a service provider or data processor on behalf of a property manager, property owner, management company, or other customer who determines the purposes for which personal information is collected and processed.

For example, when a property manager uses Riva PM to manage maintenance requests from its tenants, the property manager generally determines what tenant, property, maintenance, and vendor information is entered into or processed through Riva PM.

In other circumstances, Riva PM may collect information directly from users for purposes of operating Riva PM accounts, providing customer support, managing vendors, improving the Riva PM Services, protecting the security of the platform, and administering our business.

Where another property manager, property owner, or company controls your personal information, questions regarding that organization’s use of your information should also be directed to that organization.

2Information We Collect

The information Riva PM collects depends on your role, the features you use, and the information you or an authorized user provides to us.

Users may include:

• Property managers and property-management employees;
• Property owners and landlords;
• Tenants and residents;
• Vendors, technicians, contractors, and service providers;
• Prospective customers and users; and
• Other individuals authorized to use Riva PM.

We may collect the following categories of information.

A. Contact and Account Information

This may include:

• Name;
• Business or company name;
• Mailing address;
• Email address;
• Mobile or telephone number;
• Username;
• Account credentials;
• Profile information;
• User role;
• Property-management company affiliation; and
• Other information used to identify or administer your account.

B. Property and Rental Information

This may include:

• Property addresses;
• Unit numbers;
• Property owner information;
• Tenant or resident information;
• Property-management company information;
• Occupancy information;
• Lease-related information when provided;
• Property access instructions;
• Gate, lockbox, or entry-related instructions;
• Appliance and equipment information;
• Warranty information;
• HOA information;
• Property photographs;
• Equipment labels and serial numbers;
• Repair and maintenance history; and
• Other information necessary to operate or maintain a property.

C. Maintenance and Repair Information

This may include:

• Descriptions of maintenance problems;
• Photographs;
• Videos;
• Audio or other media;
• Dates and times of requests;
• Property and unit information;
• Repair history;
• Troubleshooting information;
• Communications among tenants, owners, property managers, and vendors;
• Vendor assignments;
• Appointments and scheduling information;
• Estimates;
• Invoices;
• Work orders;
• Completion reports;
• Before-and-after photographs;
• Warranty claims;
• Approval or authorization records; and
• Other documentation related to repairs.

Riva PM may use automated technologies, including artificial intelligence, to analyze maintenance information and assist with troubleshooting, classification, routing, vendor assignment, repair recommendations, or other maintenance-related functions.

D. Vendor and Contractor Information

This may include:

• Name;
• Company name;
• Business address;
• Telephone number;
• Email address;
• Trade or service category;
• Service area;
• Licenses;
• Certifications;
• Insurance information;
• Availability;
• Work history;
• Ratings or performance information;
• Estimates;
• Invoices;
• Payment information;
• Tax information;
• Form W-9 and information contained on a Form W-9;
• Taxpayer Identification Number or Social Security Number when included on legally required tax documents;
• Employer Identification Number;
• Banking or payment information when applicable; and
• Other information required to establish or maintain a vendor relationship.

E. Commercial and Transaction Information

This may include:

• Services requested or provided;
• Work orders;
• Estimates;
• Invoices;
• Payment records;
• Vendor assignments;
• Repair history;
• Account history;
• Subscription or service information; and
• Other transaction-related information.

F. Internet, Application, and Device Information

This may include:

• IP address;
• Device type;
• Device identifier;
• Operating system and version;
• Application version;
• Browser type;
• Login activity;
• Dates and times of access;
• Features used;
• Pages or screens viewed;
• Crash reports;
• Diagnostic information;
• Security logs;
• Push-notification tokens;
• Application identifiers; and
• Interactions with Riva PM Services.

G. Geolocation Information

Depending on the permissions granted by the user and the features used, Riva PM may collect approximate or precise geolocation information.

H. Sensitive Personal Information

Depending on the services used, Riva PM may collect sensitive personal information, including:

• Social Security Numbers or Taxpayer Identification Numbers contained in Form W-9 information;
• Financial-account information;
• Payment information;
• Precise geolocation; and
• Account credentials or authentication information.

Riva PM uses sensitive personal information only for purposes reasonably necessary to provide and secure Riva PM Services, administer vendor relationships, meet tax and legal requirements, process authorized transactions, and perform other purposes permitted by law.

3Sources of Personal Information

Riva PM may collect personal information from:

• You directly;
• Your device or browser;
• Property managers, property owners, landlords, or management companies;
• Tenants or residents;
• Vendors, contractors, and service providers;
• Other authorized Riva PM users;
• Service providers and business partners;
• Payment processors;
• Publicly available sources;
• Government agencies or licensing authorities; and
• Other sources permitted by law.

4Location Information

Certain Riva PM features may use location information to:

• Identify vendors near a rental property;
• Match repair requests with available vendors;
• Display relevant properties or service calls;
• Assist with routing or navigation;
• Confirm arrival at or departure from a service location;
• Improve dispatch and scheduling;
• Determine service availability within a vendor’s service area;
• Prevent fraud or misuse; or
• Support other location-based features requested by the user.

Riva PM will request device permission before accessing location information where required by the operating system or applicable law.

Users can generally control location permissions through their mobile-device settings. Disabling location access may prevent some Riva PM features from functioning properly.

Riva PM does not use vendor location information for unrelated advertising purposes.

If Riva PM introduces a feature that continuously collects precise location while the application is running in the background, the application will provide appropriate notice and request the permissions required for that functionality.

5Push Notifications

Riva PM may send push notifications concerning:

• New maintenance requests;
• Repair status updates;
• Vendor assignments;
• New messages;
• Appointment reminders;
• Vendor arrival or completion notifications;
• Owner approvals;
• Tenant communications;
• Work-order updates;
• Emergency or urgent repair information;
• Invoice or payment-related notifications; and
• Important account or service notices.

To provide push notifications, Riva PM or its service providers may process:

• Device push-notification tokens;
• Device type;
• Operating system;
• Application identifier;
• Notification preferences; and
• Related technical identifiers.

Users may disable push notifications through their device settings. Certain essential account, legal, or service communications may still be provided by email, SMS, telephone, or other permitted means.

6Communications

Riva PM may process communications among:

• Tenants and property managers;
• Tenants and vendors;
• Property managers and vendors;
• Property owners and property managers;
• Property owners and vendors; and
• Riva PM customer support and users.

Communications may include text messages, application messages, photographs, videos, documents, repair instructions, estimates, invoices, and other attachments.

Riva PM may store communications when necessary to provide the service, maintain repair records, resolve disputes, provide customer support, maintain security, or comply with legal obligations.

7How We Use Personal Information

Riva PM may use personal information to:

Provide the Riva PM Services

Including to:

• Create and administer accounts;
• Receive and process repair requests;
• Diagnose or categorize maintenance issues;
• Provide troubleshooting guidance;
• Assign or recommend vendors;
• Connect tenants, property managers, owners, and vendors;
• Schedule repairs;
• Manage work orders;
• Track repair status;
• Facilitate approvals;
• Process estimates and invoices;
• Maintain repair histories;
• Maintain vendor records; and
• Provide other requested property-management services.

Communicate With Users

Including through:

• In-app messages;
• Push notifications;
• Email;
• SMS text messages; and
• Telephone communications where appropriate.

Operate and Improve Riva PM

Including to:

• Maintain the application;
• Develop new features;
• Improve automated maintenance diagnosis and routing;
• Troubleshoot technical problems;
• Analyze platform performance;
• Provide customer support; and
• Improve user experience.

Protect Riva PM and Its Users

Including to:

• Authenticate users;
• Prevent fraudulent activity;
• Detect unauthorized access;
• Protect accounts;
• Investigate misuse;
• Protect property owners, tenants, property managers, vendors, and Riva PM; and
• Maintain platform security.

Meet Legal and Business Obligations

Including to:

• Maintain business records;
• Maintain tax records;
• Process vendor W-9 information;
• Prepare legally required tax documents;
• Respond to subpoenas, court orders, or government requests;
• Comply with applicable laws;
• Establish, exercise, or defend legal claims; and
• Conduct corporate transactions permitted by law.

8Artificial Intelligence and Automated Processing

Riva PM may use artificial intelligence and other automated technologies to assist with property-maintenance operations.

Information submitted in a maintenance request may be analyzed to:

• Identify the likely type of maintenance problem;
• Ask relevant troubleshooting questions;
• Recommend troubleshooting steps;
• Determine whether professional service may be necessary;
• Identify the appropriate type of vendor;
• Prioritize maintenance requests;
• Assist with vendor assignment;
• Summarize communications or repair information; and
• Automate administrative portions of the repair workflow.

Riva PM may use third-party technology providers to provide some AI or automated-processing functionality.

9When We Disclose Personal Information

Riva PM may disclose personal information to the following categories of recipients:

A. Authorized Riva PM Users

Information may be shared with tenants, property managers, property owners, vendors, contractors, and other authorized users when necessary to perform a property-management or repair function.

B. Service Providers and Contractors

These may include providers of:

• Cloud hosting;
• Database storage;
• Cybersecurity;
• Email;
• SMS communications;
• Push notifications;
• Mapping and location services;
• Artificial intelligence services;
• Customer support;
• Analytics;
• Accounting;
• Payment processing;
• Tax reporting; and
• Other infrastructure necessary to operate Riva PM.

C. Property Managers and Property Owners

Where Riva PM processes information on behalf of a property manager or property owner, information may be provided to that party according to its instructions and the services it uses.

D. Government Entities and Professional Advisors

Information may be disclosed to:

• Government agencies;
• Courts;
• Law-enforcement authorities;
• Auditors;
• Accountants;
• Attorneys;
• Insurance providers; and
• Other professional advisors.

E. Business Transaction Parties

Information may be disclosed to parties involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar corporate transaction.

F. Other Parties With Consent or at Your Direction

Information may be disclosed when you request or authorize the disclosure or when disclosure is otherwise permitted by law.

10Sale of Personal Information and Targeted Advertising

Riva PM does not sell personal information for monetary consideration.

Riva PM does not use personal information collected through property-management and maintenance operations for cross-context behavioral advertising.

Riva PM does not sell tenant information, rental-property information, maintenance photographs, vendor W-9 information, tax identification information, or precise vendor location information to advertisers or data brokers.

If our practices materially change in the future, we will update this Privacy Policy and provide any notices or opt-out rights required by applicable law.

11Payments and Financial Information

If Riva PM provides payment, invoice collection, or payment-processing functionality, certain financial information may be processed by Riva PM or an authorized third-party payment processor.

This may include:

• Bank-account information;
• Payment-card information;
• Payment transaction information;
• Invoice information;
• Vendor payment information;
• Billing information; and
• Payment history.

Where a third-party payment processor directly collects payment credentials, those credentials may be governed by that provider’s privacy policy and security practices.

Riva PM may maintain transaction records as necessary for accounting, tax, fraud-prevention, dispute-resolution, and legal-compliance purposes.

12Vendor W-9 and Tax Information

Riva PM may request or maintain Form W-9 and related tax information from vendors where necessary for vendor onboarding, payment administration, accounting, or tax-reporting requirements.

W-9 information may include:

• Legal name;
• Business name;
• Address;
• Tax classification;
• Employer Identification Number;
• Taxpayer Identification Number; or
• Social Security Number where applicable.

Such information will be used only for legitimate business, tax, accounting, payment, compliance, security, and legally required reporting purposes.

Access to tax identification information should be limited to authorized personnel and service providers with a legitimate need to access it.

13Data Retention

Riva PM retains personal information for only as long as reasonably necessary for the purposes for which it was collected, including providing Riva PM Services and satisfying legal, accounting, tax, security, dispute-resolution, and contractual requirements.

The following retention periods describe our general practices. Actual retention may vary based on legal requirements, the nature of the information, the user’s relationship with Riva PM, and whether the information is maintained on behalf of a property manager or other customer.

When information is no longer reasonably required, Riva PM may delete, destroy, or de-identify it in accordance with applicable law and our data-retention practices.

14Data Security

Riva PM uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Access to sensitive information should be limited to authorized individuals and service providers with a legitimate business need.

However, no electronic communication, Internet service, cloud-storage system, or information-security system can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials and should promptly notify Riva PM of suspected unauthorized access.

15Your Privacy Rights

Depending on where you reside and applicable law, you may have the right to:

• Know whether we process your personal information;
• Request access to personal information;
• Request information about categories of information collected;
• Request information about the purposes for collecting or using personal information;
• Request information about categories of sources from which personal information is collected;
• Request information about categories of recipients to whom personal information is disclosed;
• Request correction of inaccurate personal information;
• Request deletion of certain personal information;
• Obtain a copy of certain personal information in a portable format;
• Opt out of the sale or sharing of personal information, where applicable;
• Opt out of targeted or cross-context behavioral advertising, where applicable;
• Limit certain uses of sensitive personal information, where applicable;
• Appeal a decision concerning a privacy request; and
• Exercise privacy rights without unlawful discrimination or retaliation.

These rights are subject to exceptions and limitations under applicable law.

If Riva PM processes your information solely on behalf of a property manager, landlord, or other customer, we may refer your request to that organization or assist that organization in responding to your request.

16California Privacy Notice

This section applies to California residents to the extent required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

A. Categories of Personal Information Collected

During the preceding 12 months, Riva PM may have collected the following categories of personal information:

Riva PM may collect these categories from the sources described in Section 3 and use them for the purposes described in Section 7.

B. Business or Commercial Purposes

Riva PM may collect, use, or disclose the categories above for the following business or commercial purposes:

• Providing, maintaining, and improving Riva PM Services;
• Creating and administering accounts;
• Processing maintenance requests and work orders;
• Coordinating repairs and vendor assignments;
• Providing troubleshooting and automated maintenance assistance;
• Communicating with users;
• Processing payments, invoices, and tax information;
• Managing vendor relationships;
• Providing customer support;
• Monitoring and improving platform performance;
• Detecting, preventing, and investigating fraud, misuse, and security incidents;
• Debugging and repairing errors;
• Conducting internal research and development;
• Complying with legal, tax, accounting, and regulatory obligations;
• Establishing, exercising, or defending legal claims;
• Conducting corporate transactions; and
• Other purposes disclosed at the time information is collected or otherwise permitted by law.

C. Categories Disclosed

During the preceding 12 months, Riva PM may have disclosed the categories of personal information described above to the following categories of recipients:

• Authorized Riva PM users;
• Property managers and property owners;
• Vendors and contractors;
• Cloud-hosting and storage providers;
• Cybersecurity providers;
• Email, SMS, and push-notification providers;
• Mapping and location-service providers;
• Artificial-intelligence and automated-processing providers;
• Customer-support providers;
• Analytics and technology providers;
• Accounting, tax, payment, and financial-service providers;
• Attorneys, auditors, insurers, and other professional advisors;
• Government entities, courts, and law-enforcement authorities;
• Parties involved in corporate transactions; and
• Other parties at the user’s direction or with the user’s consent.

Riva PM does not sell personal information for monetary consideration and does not share personal information for cross-context behavioral advertising.

D. Sensitive Personal Information

Riva PM may collect sensitive personal information as described above.

Riva PM uses sensitive personal information only for purposes reasonably necessary and proportionate to:

• Providing requested services;
• Processing authorized transactions;
• Administering vendor relationships;
• Processing W-9 and tax information;
• Protecting accounts and systems;
• Detecting and preventing fraud or security incidents;
• Complying with legal obligations;
• Maintaining records;
• Establishing, exercising, or defending legal claims; and
• Other purposes permitted by applicable law.

Riva PM does not use sensitive personal information to infer characteristics about individuals for advertising purposes.

E. Retention

Riva PM’s general retention periods are described in Section 13. Riva PM retains each category of personal information only for as long as reasonably necessary and proportionate to the purpose for which it was collected, including legal, tax, accounting, security, dispute-resolution, warranty, insurance, and contractual requirements.

F. California Consumer Requests

California residents may request:

• The categories of personal information collected;
• The categories of sources from which personal information is collected;
• The business or commercial purposes for collecting, selling, or sharing personal information;
• The categories of personal information disclosed, sold, or shared;
• The categories of recipients to whom personal information is disclosed;
• Access to specific pieces of personal information;
• Correction of inaccurate personal information;
• Deletion of personal information, subject to applicable exceptions;
• Portability of certain personal information;
• Information about the retention of personal information;
• Limitation of certain uses of sensitive personal information, where applicable; and
• Opt-out of sale or sharing, where applicable.

Riva PM does not sell personal information or share personal information for cross-context behavioral advertising. Accordingly, there is currently no sale or sharing opt-out required for those activities.

17California Request Methods and Verification

California residents may submit privacy requests by:

• Emailing info@buyhome.pro;
• Calling 909-708-6699; or
• Writing to:

A request should identify the requester, describe the request, and provide sufficient information for Riva PM to reasonably verify the requester’s identity.

Riva PM may verify identity by requesting information that reasonably matches information already maintained by Riva PM. The level of verification may depend on the sensitivity of the information requested.

For requests to access or delete specific pieces of personal information, Riva PM may require a higher level of verification than for requests concerning general categories or information.

Riva PM will not require a California resident to create an account solely to submit a privacy request. However, if the requester has an account, Riva PM may use the account’s existing authentication procedures to verify identity.

Riva PM will generally respond to a verifiable consumer request within 45 days. If additional time is reasonably necessary, Riva PM may extend the response period by up to 45 additional days and will provide notice of the extension as required by law.

Riva PM will not charge a fee for responding to a request unless permitted by applicable law. If a request is manifestly unfounded, excessive, repetitive, or otherwise permitted to be charged under applicable law, Riva PM may charge a reasonable fee or decline to act on the request as permitted by law.

18Authorized-Agent Procedures

A California resident may use an authorized agent to submit a request on the resident’s behalf.

An authorized agent may submit a request by:

• Providing the consumer’s written authorization designating the agent;
• Providing information reasonably necessary to verify the consumer’s identity;
• Providing information reasonably necessary to verify the agent’s identity; and
• Providing proof that the agent has authority to act on the consumer’s behalf.

If the authorized agent has a power of attorney under applicable law, Riva PM may accept the power of attorney instead of separate written authorization.

Riva PM may contact the consumer directly to confirm the request or authorization. Riva PM may deny a request if it cannot reasonably verify the consumer, the agent, or the agent’s authority.

An authorized agent may submit a request using the contact methods listed in Section 17.

19California Appeals

If Riva PM denies or partially denies a California privacy request, the requester may appeal the decision.

An appeal should:

• Identify the original request;
• Explain why the requester believes the decision should be reconsidered;
• Include any additional information relevant to the request; and
• Be submitted using one of the methods below.

Riva PM will generally respond to an appeal within 45 days. If additional time is reasonably necessary, Riva PM may extend the response period by up to 60 additional days and will provide notice of the extension as required by law.

If Riva PM denies an appeal, the response will explain the reason for the decision and, where required by law, provide information about how to contact the California Privacy Protection Agency or other applicable regulator.

20Non-Discrimination

Riva PM will not unlawfully discriminate or retaliate against an individual for exercising privacy rights provided by applicable law.

Riva PM will not:

• Deny goods or services;
• Charge different prices or rates;
• Provide a different level or quality of service; or
• Threaten or impose penalties

because a California resident exercised a privacy right.

Riva PM may offer financial incentives or price differences only if permitted by applicable law and after providing any required notice and obtaining any required consent.

21Cookies and Similar Technologies

The Riva PM website and web-based services may use cookies, local storage, software-development kits, analytics tools, and similar technologies to:

• Maintain user sessions;
• Authenticate accounts;
• Remember preferences;
• Protect accounts;
• Understand how Riva PM is used;
• Diagnose technical problems;
• Improve functionality; and
• Maintain security.

Users may be able to control certain cookies through their web browser or device settings.

Disabling certain technologies may cause portions of Riva PM Services to function incorrectly.

22Third-Party Services and Links

Riva PM may integrate with or provide links to third-party services, including mapping providers, payment providers, communications providers, property-management platforms, warranty companies, and other service providers.

Third-party services may maintain their own privacy policies and terms.

Riva PM is not responsible for the independent privacy practices of third parties except to the extent required by applicable law.

Users should review the privacy practices of third-party services before providing information directly to those services.

23Children’s Privacy

Riva PM Services are designed for property-management and related business purposes and are not directed toward children under 13.

Riva PM does not knowingly collect personal information directly from children under 13 through creation of a Riva PM user account.

If we learn that personal information has been collected directly from a child in violation of applicable law, we will take appropriate steps to delete or otherwise address that information.

24Property Access and Safety Information

Users may sometimes provide access instructions, gate codes, lockbox information, alarm instructions, photographs, or similar information necessary to complete maintenance work.

Such information should only be entered into Riva PM when reasonably necessary for legitimate property-management or service purposes.

25User Responsibilities

Users should avoid submitting unnecessary sensitive personal information through maintenance requests, messages, photographs, or other Riva PM features.

Users should also ensure that:

• Information submitted to Riva PM is authorized;
• Account credentials are kept confidential;
• Property access information is shared only when necessary;
• Photographs and videos submitted for maintenance purposes do not unnecessarily contain personal documents or sensitive information; and
• Personal information obtained through Riva PM is used only for authorized property-management or service purposes.

Property managers, owners, and vendors using Riva PM remain responsible for their own compliance obligations under applicable privacy, housing, employment, tax, licensing, and other laws.

26Changes to This Privacy Policy

Riva PM may update this Privacy Policy periodically to reflect changes in our services, technology, business practices, or applicable laws.

When material changes are made, we will post the updated Privacy Policy and revise the Effective Date.

Where required by law, we may provide additional notice regarding material changes.

27Contact Us

If you have questions regarding this Privacy Policy, Riva PM’s privacy practices, or a request concerning your personal information, please contact:

Privacy requests and appeals may be submitted through the contact information above.